Sneaky Query... how did this happen?

Use something like

curl http://pi.hole/admin/api.php?getAllQueries\&auth=183c1b634da0078fcf5b0af84bdcbb3e817708c3f22b329be84165f4bad1ae58

as described here

You can get the auth key from your /etc/pihole/setupVars.conf file (see WEBPASSWORD=).